45acaaa5084051ff5426b2b602eaf4c7d6c694b6dfafb039a538de1b75976593

Analysis

max time kernel
140s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22/07/2024, 10:08

Target

62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe
Size

46KB
MD5

62cd7460ef32808eb9ca986d7c89bcf3
SHA1

985bf2c73b4c2ccde75350a19e0bdc6b05958764
SHA256

45acaaa5084051ff5426b2b602eaf4c7d6c694b6dfafb039a538de1b75976593
SHA512

3f1fac99ab93f7056e9f67187d8c2473bbdd6ad7feae0968e604ab1ba5aad71a88a596b775748a8dd20aecddd5a5661b882c0f9cc6cfc3f5a41a417ab6f03fba
SSDEEP

768:H1rIgv1RaU/1/gLPsKEenyC9YmWwJdVqv5xu2qn+/apvNMJCBc7WzWRGxx8bPrfA:HL7/1YLPs15mWwnVqvy2qnWaplq0QWzj

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1080 set thread context of 3208	1080	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe	86

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3208	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe
3208	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe
3208	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe
3208	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1080	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1080 wrote to memory of 3208	1080	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe	86
PID 1080 wrote to memory of 3208	1080	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe	86
PID 1080 wrote to memory of 3208	1080	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe	86
PID 1080 wrote to memory of 3208	1080	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe	86
PID 1080 wrote to memory of 3208	1080	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe	86
PID 1080 wrote to memory of 3208	1080	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe	86
PID 1080 wrote to memory of 3208	1080	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe	86
PID 3208 wrote to memory of 3452	3208	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe	56
PID 3208 wrote to memory of 3452	3208	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe	56
PID 3208 wrote to memory of 3452	3208	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe	56
PID 3208 wrote to memory of 3452	3208	62cd7460ef32808eb9ca986d7c89bcf3_JaffaCakes118.exe	56

memory/1080-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1080-1-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1080-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1080-11-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3208-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3208-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3208-9-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3208-8-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/3208-12-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/3452-13-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3452-14-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download